Spain’s Election Call Puts Its NIS2 Delay Back in Focus
Spain has called a November election after the Commission documented incomplete NIS2 transposition in July.
Europe Series
The EU’s New Data-Centre Labels Won’t Tell You the Whole Energy Story
The EU plans public energy and water grades for individual data centres from 2027. The labels should aid comparisons, but will not show each site’s exact annual electricity total.
Attackers Copied Every Incoming Belnet Email for Two Months
A supplier zero-day let attackers copy every incoming email sent to Belnet and one customer for more than two months.
Spain’s Reported AI-Agent Breach Happened Behind a Login That Worked
A legitimate login did not mean legitimate intent. Spain's data-protection authority describes an alleged AI-agent attack, while warning that the organisation's report still needs analysis.
Ace & Tate’s Copied Order Details Can Make the Next Scam Look Real
Ace & Tate has confirmed that customer contact, order and delivery details were copied from logistics partner CEVA. The fields can make delivery scams more convincing even though payment data and passwords were not involved.
Six Mistral Vibe Flaws Let an AI Agent Act Without Your Approval
Six Mistral Vibe flaws expose a gap between the command an AI coding agent approves and the action its shell actually performs. The real boundary is the developer's machine.
Europe Nears Its First Quantum-Safe Deadline With “Limited Progress”
Europe’s first post-quantum milestone arrives at the end of 2026. The roadmap is not a blanket law, but the EU’s own assessment says implementation is still making only limited progress.
TeamSystem Attackers Stole the Data That Makes Fake Invoices Look Real
TeamSystem attackers reportedly stole IBANs and accounting records, giving criminals the context needed to make invoice fraud look routine.
A DDoS Against One Provider Reached Norway’s Digital Government.
A distributed denial-of-service attack against infrastructure operated by Digdir’s supplier Vivicta disrupted access to shared digital services used across Norway’s public sector. The incident affected ID-porten and a chain of dependent services, showing how an availability attack against one provider…
The Algorithm Suspended the Driver. The Regulator Called It an €825 Million GDPR Violation.
A €824.99 million Dutch GDPR fine against Uber turns meaningful human review from an AI-governance slogan into an operational control.